Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa
File: eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa (raw, json)
Hash identifier: BhyxtlXqcAofnuqBwhv9Kjqp3Z99p6OsZP1kYIBSUZ0=
Subject key identifier: 7A:8D:12:E1:14:88:F1:33:7D:91:23:78:36:0D:B5:37:D8:FA:58:E2
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018E9AB9653DE24B8D5B4B47AAAB277AB4D3
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa
Signing time: Mon 01 Apr 2024 17:33:45 +0000
ROA not before: Mon 01 Apr 2024 17:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a0e:5382::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:b9:65:3d:e2:4b:8d:5b:4b:47:aa:ab:27:7a:b4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Apr 1 17:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a8d12e11488f1337d912378360db537d8fa58e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:0c:fb:97:b7:d6:ad:ea:d9:e5:a0:40:4f:
7c:32:07:66:04:8b:71:62:38:94:da:09:d5:23:23:
ae:3e:42:31:31:a9:a5:39:11:6a:1a:a4:0a:cd:44:
89:7a:63:46:ba:ca:9d:b8:82:ed:f4:10:7e:22:e2:
e1:6d:3e:75:a1:76:00:03:21:4b:ca:77:bb:2d:10:
41:22:50:da:da:5b:84:cf:f4:32:26:3c:78:86:08:
50:d7:21:31:ff:26:eb:d9:8d:fa:b0:b9:6a:35:58:
76:5f:7f:82:63:bf:10:68:6b:80:5e:a2:dc:0b:b4:
9b:6f:a2:99:a4:d2:2c:f6:c9:6a:36:45:41:10:a2:
e4:cf:cb:cc:da:3b:72:74:42:be:d9:2f:26:c2:3f:
42:60:a1:d7:32:a4:20:dd:b3:10:8b:b4:16:63:a9:
d0:0f:68:15:87:c6:1a:9f:90:aa:24:ac:be:86:82:
57:79:e0:44:f0:b0:8d:24:10:d5:c0:5b:63:44:88:
af:bf:14:fb:7f:fe:c6:62:a4:34:a8:0c:28:cd:b7:
7d:82:68:0a:64:65:08:a6:4d:7f:c8:8e:02:20:60:
ea:82:c9:7f:03:e0:9f:db:de:b3:64:9d:05:4a:e3:
88:09:7f:61:ea:c0:ab:e2:65:94:e7:1c:0a:91:89:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:12:E1:14:88:F1:33:7D:91:23:78:36:0D:B5:37:D8:FA:58:E2
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/eo0S4RSI8TN9kSN4Ng21N9j6WOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5382::/32
Signature Algorithm: sha256WithRSAEncryption
56:63:6d:4d:3b:c5:33:be:74:42:cf:ec:91:07:2f:71:e3:a5:
fe:52:8e:42:44:7c:d9:c5:f6:39:14:f9:c2:48:bf:66:d2:ca:
78:d8:5e:cc:d1:51:23:1c:33:7d:e9:90:23:d3:3f:89:cd:72:
4b:83:f5:ba:3b:52:9a:ae:63:b9:3d:3c:07:57:35:d8:81:04:
0f:b8:ee:b6:17:6d:3e:a6:3a:4f:46:de:9b:89:83:e2:b3:7c:
be:f5:d4:cf:64:c7:93:90:0e:01:66:7a:e3:6c:f6:3f:d3:66:
70:1e:87:6c:6d:d2:96:ef:e6:0f:c4:a6:42:4f:06:f9:f7:fe:
9b:0f:25:46:3a:af:39:6b:f0:6e:1c:4d:60:c5:35:d6:be:c0:
e3:eb:94:20:6c:c7:bf:63:f7:38:e0:0b:bd:15:c1:49:fb:a7:
9c:42:5b:35:53:8c:e7:d5:0a:4b:0e:88:13:68:89:68:03:cc:
02:e9:5b:19:14:91:f7:4a:ab:b9:52:73:39:a1:4e:59:db:ef:
37:36:52:e5:a4:3a:78:fb:d1:30:93:5e:85:8c:0b:3c:7e:e1:
63:d8:81:55:c0:c3:d1:3f:36:2c:e7:fd:11:8d:42:3a:3a:e9:
da:66:34:6e:c0:b6:22:46:ee:d2:4b:38:89:65:55:b9:f3:62:
da:3e:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:45 2024 by rpki-client on console-fra.rpki-client.org